PHP2Shell was only the beginning: AI is accelerating the patch race
CVE-2026-109618 and CVE-2026-109619 forced government agencies across Germany, France, Belgium, and the Netherlands to take services offline while waiting for patches. The incident underscores a critical vulnerability: approximately 40% of PHP users run unsupported versions. AI tools have exponentially accelerated the discovery of new vulnerabilities (CVEs), creating an urgent mismatch between threat velocity and patch availability across the open-source community.
Key points
- PHP2Shell vulnerabilities caused European government websites to go offline
- 40% of PHP users run unsupported versions lacking security patches
- AI acceleration of CVE discovery outpacing organizational patching capacity
- Signals emerging pattern of faster vulnerability discovery across open-source ecosystem
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The New Stack did the reporting; read the original for the full story.
Read the full story at The New Stack
